Senior Security Engineer

Enviri Corporation is a market-leading global provider of environmental solutions for industrial, retail, and medical waste streams, as well as innovative equipment and technology for the rail sector. We have an unrivaled breadth of experience across the globe and an impressive reputation that stretches back more than a century. Based in Camp Hill, PA, with more than 8500 employees and the company operates in more than 30 countries.

About Enviri GSC

Enviri GSC handles a wide range of services, including finance and accounting shared services, global HR shared services, providing IT services and helpdesk support, and market research support to Harsco globally. We have been operating since 2008 & serving 30+ Countries

About the Role 

• The Senior Security Engineer is the enterprise security Subject Matter Expert (SME) for identity, messaging, authentication, monitoring and security integrations. The role provides strategic security input, develops technical designs, secure integration, documentation and operational governance of Microsoft Entra ID, Active Directory, Exchange, Microsoft Sentinel, Silverfort, PKI, DNS and related enterprise services. 
• The role provides security expertise for business-critical application integrations, including  Microsoft 365, Azure, HR, ERP and third-party platforms, ensuring secure access, provisioning, logging, monitoring, resilience and compliance closely working with security partners and internal IT teams.
• Key Responsibilities 
• Security Partnerships
• Partner with internal cybersecurity teams, external security vendors, technology partners, and business stakeholders to design, implement, and continuously improve enterprise security controls and capabilities.
• Implementation of NIST Cybersecurity Framework (CSF) and industry security best practices across identity, cloud, infrastructure, messaging, monitoring, and business application platforms.
• Assess security risks, recommend remediation strategies, and lead the implementation of security improvements, ensuring alignment with enterprise security standards, compliance requirements, and Zero Trust principles.
• Identity & Access Security 
• Own Microsoft Entra ID, Active Directory, Azure AD Connect and cloud synchronization architecture, health and security. 
• Manage identity automation scripts, Administrative Units, RBAC, Conditional Access, MFA, domains, trusts and privileged access controls. 
• Design secure SSO, authentication, user lifecycle and provisioning integrations for Microsoft 365 and other enterprise applications. 
• Validate service accounts, API permissions, role mappings, access reviews and joiner-mover-leaver controls for integrated platforms. 
• Security Platforms 
• Lead Microsoft Sentinel management, documentation, data onboarding, detection use cases, workbooks and operational support. 
• Integrate and monitor logs from Domain Controllers, Azure, Exchange, servers, applications and security platforms. 
• Define logging, retention, alerting, incident workflow and operational runbook standards. 
• Tune analytics rules and dashboards to improve detection quality, investigation and response. 
• Effective use of Microsoft Security Copilot and AI-powered security capabilities to improve threat detection, investigation, and incident response.
• Evaluate, secure, and govern AI integrations and enterprise AI solutions, ensuring compliance with security, privacy, identity, and NIST best practices.
• Silverfort & Authentication Security 
• Serve as the Silverfort SME, platform owner and primary technical point of contact. 
• Design, build, configure and operate Silverfort nodes in Azure and hybrid environments. 
• Manage integrations, authentication policies, licensing, vendor engagement, upgrades, health monitoring, high availability and recovery testing. 
• Messaging, PKI & Enterprise Services 
• Provide security oversight for Exchange Online, Hybrid Exchange, load balancers, mail flow, Exchange rules and Teams integrations. 
• Manage Enterprise Certificate Authority, public certificates, PKI, KMS and certificate lifecycle controls. 
• Oversee public DNS, domain registration and deregistration, billing, DMARC, SPF and DKIM. 
• Architecture, Integration & Governance 
• Act as the security design authority and SME for cloud, identity, HR, ERP, business application and third-party integrations. 
• Review authentication, authorization, data flows, APIs, service principals, service accounts, certificates, and SIEM logging. 
• Maintain reference architectures, diagrams, standards, runbooks, dependency maps and recovery procedures. 
• Support audits, compliance reviews, security incidents, platform upgrades and Domain Controller post-upgrade testing. 

Experience:

• 6 - 8years of experience in security engineering, identity, infrastructure security or security architecture. 
• Strong expertise in Entra ID, Active Directory, Azure AD Connect, Exchange, Microsoft Sentinel, Silverfort, PKI and Azure security. 
• Experience securing SaaS and enterprise integrations, Microsoft 365, HR and ERP platforms. 
• Working knowledge of SAML, OAuth/OIDC, APIs, Microsoft Graph, service principles, certificates and privileged access controls. 
• Proficiency in PowerShell automation, SIEM integration, troubleshooting, and security documentation. 
• Desirable certifications: CISSP, CISM, SC-100, SC-300, SC-200 or AZ-500. 
• Success Measures 
• Secure and reliable operation of identity, messaging, Sentinel and Silverfort platforms. 
• Secure, documented and supportable integrations
• Complete SIEM visibility across identity, cloud, messaging, Domain Controllers and priority infrastructure. 
• Current architecture diagrams, runbooks, ownership records and knowledge-transfer documentation. 
• Improved security posture, authentication resilience, audit readiness and operational recovery.

Key Technologies 

Entra ID | Active Directory | Azure AD Connect | Microsoft Sentinel | Silverfort | Exchange Online | Teams | NetSuite | SuitePeople | PKI | DNS | DMARC | Azure | PowerShell | Microsoft Graph | SAML | OAuth/OIDC | SCIM | SSO | MFA | Conditional Access | KMS

Disclaimer

The information about this job description given above has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.